UCLA Policy 603:	Privacy of and Access to Information (Legal Requirements)
Issuing Officer:	Associate Vice Chancellor, Business & Financial Services	Printable View
Responsible Dept:	Corporate Financial Services
Effective Date:	July 1, 1998
Supersedes:	UCLA Policy 603, dated 4/1/1984

The University supports the principle that access to information concerning the conduct of business in a public university is a right of every citizen. It further supports the principle of securing to Individuals their fundamental rights of privacy regarding their access to and disclosures from Records which pertain to them.

This document explains the general legal requirements governing privacy of and access to information, and establishes campus procedures to implement requirements of the State of California Information Practices Act. The legal requirements apply to general University Records. They supplement established University student, academic, and staff personnel policies which govern maintenance and access to Records. Assistance in interpreting this policy is available from the Records Management Coordinator.

A. California Public Records Act (Public Access to University Records)

1. Application to the University : The California Public Records Act provides that access to information concerning the conduct of the people's business is a fundamental and necessary right of every Person in this state; that public Records must be open to public inspection during regular office hours; and that every citizen has the right to inspect any public Record except as provided in the Act.

2. Records Not to be Made Public : The following are not public Records under the California Public Records Act:

1. Any Record for which it can be demonstrated that the public interest served by not making the Record public clearly outweighs the public interest served by disclosure of the Record.

2. Preliminary drafts, notes, or intra-University memoranda not retained by the University in the ordinary course of business, provided that the public interest in withholding such material clearly outweighs the public interest in disclosure.

3. Records pertaining to pending litigation to which the University is a party.

4. Records or complaints to, or investigations conducted by, the campus Police Department or other agencies for correctional or law enforcement purposes.

5. Test questions, scoring keys, and other examination data.

6. Real estate appraisals, engineering feasibility estimates and evaluations, relative to the acquisition of property, or public supply and construction contracts, until all of the property has been acquired or contract agreement obtained.

7. Library and museum materials acquired and presented solely for reference or exhibition.

8. Any Record, the disclosure of which is exempted or prohibited pursuant to provisions of federal or state law, including provisions of the evidence code relating to the physician-patient, psychotherapist-patient, lawyer-client, and official confidence privileges.

9. Personnel, medical, or similar files, the disclosure of which would constitute an unwarranted invasion of Personal privacy.

B. Federal Privacy Act of 1974, Public Law 93-579

1. Application to the University : The Federal Privacy Act is designed to safeguard the rights and privacy of Individuals from the encroachments of Federal agencies in maintaining Records on Individuals. Except with respect to social security numbers, it applies to the University only in the relatively few instances when the University enters into a contract (not a grant) with a Federal agency and in which the University agrees to undertake the design, development, or operation of a System of Records on Individuals which accomplishes a function of the Federal sponsoring agency. Additional information may be obtained from the Office of the Records Management Coordinator, the General Counsel's Office, or the Office of the Campus Counsel.

2. University Use of Social Security Number : The Federal Privacy Act does pertain to the University in relation to use of the social security number. Rules for collecting social security numbers and sample wording to be used are set forth in UCLA Policy 602 Section IV.

State of California Information Practices Act of 1977 (Privacy of and Access to University Records Pertaining Specifically to Personal Data)

Individual: A natural Person acting in his or her Individual and private capacity.

Person: Any natural Person, corporation, partnership, firm or association.

Record: A grouping of information about an Individual which is maintained by the Individual's name or by some identifying number or symbol or other identifying particular assigned to the Individual.

System of Records: One or more Records, which pertain to one or more Individuals, which are maintained by the campus from which information is retrieved by name of an Individual or by some identifying number, symbol, or other identifying particular assigned to the Individual.

Personal Information: Any information in any Record about an Individual which is maintained by the University and is not included in the definitions in Attachment B of confidential information (e.g., criminal law enforcement Records, written testing materials, some medical Records, etc.) or non-Personal Information (e.g., Individuals' names, campus phones or addresses, some statistical Records required by law, etc.).

Examples of Personal Information include but are not limited to home telephone numbers, citizenship, birthdates, social security numbers, education Records, business and financial transactions, medical and employment histories. (Note that an Individual's home address may be disclosed after the Individual has had the opportunity to request nondisclosure but does not so request.)

C. Access to Records

1. General Requirements :

1. Each Individual shall have the right to inquire and be notified as to whether the University maintains a Record about himself or herself.

2. When an Individual asks a department whether or not it holds Records pertaining to the Individual, the department's response shall include the location of the Record, responsible custodian, and shall include an explanation of procedures to contest the Records' contents.

3. The campus shall develop procedures whereby Individuals, including but not limited to University employees and officials, Individuals not employed by the University, governmental agencies, corporations, partnerships, firms, and associations, can appeal a University decision regarding Personal and confidential information.

4. Information provided by the University will be in a form reasonably comprehensible to the general public.

5. The campus may not disclose any Personal or confidential Information which it maintains on an Individual unless allowed under the guidelines contained in Attachment C.

2. Specific Requirements for access to Personal Information by the Individual subject of the Record, by University employees or officials, or by others are contained in Attachment C.

3. Locating the Record for Access :

If the campus cannot locate a Record by reference to the Individual's name only or when locating a Record by name only would be an unreasonable administrative burden, the campus may require the Individual to give additional identifying information to aid in locating the Record.

1. Pursuant to a determination by the University that compelling circumstances exist which affect the health or safety of an Individual.

2. Pursuant to any subpoena, court order, search warrant or other compulsory legal process; to a law enforcement agency when required for an investigation of criminal activity.

3. To a governmental agency as required by law or to fulfill a constitutional or statutory duty, unless a notice of the type of disclosure has already been provided at the time of collection. (Refer to Section IV.B above).

Refer to UCLA Procedure, 603.1, Section III.B.

1. Make each correction and inform the Individual of such corrections; or

2. Inform the Individual of its refusal to amend the Record. (Refer to UCLA Procedure 603.1, Section III.C).